Add kwallet-parser and kwallet-cli

Implements a read-only parser for KWallet file format (.kwl) supporting
both legacy (Blowfish-ECB + SHA1) and modern (Blowfish-CBC +
PBKDF2-SHA512) formats. Includes a CLI tool for reading and exporting
wallet contents as JSON.

This enables server-side auto-migration of KWallet keyring files to
oo7-daemon format, similar to existing v0 format migration.

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

Author: bilelmoussaoui

.github/workflows/CI.yml

@@ -39,6 +39,14 @@ jobs:
         run: |
           cargo build --manifest-path ./cli/Cargo.toml
 
+      - name: Build kwallet-parser
+        run: |
+          cargo build --manifest-path ./kwallet/parser/Cargo.toml --features serde
+
+      - name: Build kwallet-cli
+        run: |
+          cargo build --manifest-path ./kwallet/cli/Cargo.toml
+
       - name: Build Server (native)
         run: |
           cargo build --manifest-path ./server/Cargo.toml
@@ -85,6 +93,10 @@ jobs:
         run: |
           cargo test --manifest-path ./server/Cargo.toml --no-default-features --features openssl_crypto
 
+      - name: Test kwallet-parser
+        run: |
+          cargo test --manifest-path ./kwallet/parser/Cargo.toml --features serde
+
   cargo-deny:
       runs-on: ubuntu-latest
       steps:

Cargo.lock

@@ -5,6 +5,8 @@ members = [
   "cargo-credential",
   "client",
   "cli",
+  "kwallet/cli",
+  "kwallet/parser",
   "macros",
   "pam",
   "portal",

Cargo.toml

@@ -58,6 +58,7 @@ grcov coverage-raw/combined.info \
   --ignore "**/pam/*" \
   --ignore "**/tests/*" \
   --ignore "**/examples/*" \
+  --ignore "**/kwallet/*" \
   --ignore "**/target/*" \
   --ignore "**/error.rs"
 
@@ -75,6 +76,7 @@ grcov coverage-raw/combined.info \
   --ignore "**/pam/*" \
   --ignore "**/tests/*" \
   --ignore "**/examples/*" \
+  --ignore "**/kwallet/*" \
   --ignore "**/target/*" \
   --ignore "**/error.rs"
 

coverage.sh

@@ -27,4 +27,6 @@ multiple-versions = "deny"
 wildcards = "deny"
 highlight = "all"
 skip = [
+    { name = "rand_core" },
+    { name = "winnow" },
 ]